Jamf Account uses a mapping configuration in JSON formatting to match users between your identity provider (IdP) to your Jamf platform product users. You can modify this JSON mapping configuration to fit your organization's existing identity infrastructure, using different attributes than the default.
Jamf Account uses Auth0 as a broker between your IdP and Jamf Account. When you configure mappings, the corresponding Auth0 connection is updated automatically. For more details, see Auth0's documentation on custom OIDC mappings.
Your IdP integrated with Jamf Account
Advanced features enabled in Jamf Account ()
Administrator access to your identity provider's configuration settings
Ensure that the claim you want to use for mapping is included in the token your IdP sends to Jamf Account. For assistance, contact your identity provider's support portal.
The following JSON mapping is Jamf Account's default mapping. Copy it to a text editor and modify as needed for your organizations identity infrastructure.
{
"mapping_mode": "use_map",
"attributes": {
"name": "${context.tokenset.name}",
"email": "${context.tokenset.email}",
"groups": "${context.tokenset.groups}",
"username": "${context.tokenset.preferred_username}",
"federated_groups": "${context.tokenset.groups}",
"federated_locale": "${context.tokenset.locale}",
"federated_zoneinfo": "${context.tokenset.zoneinfo}"
}
}emailnameusernamegroups
Claims are mapped as configured, allowing administrators to log in to your Jamf Platform products using their identity provider credentials.